CVE-2026-101102

Name of the Vulnerable Software and Affected Versions deepseek-ai deepseek-harness versions prior to 0.1.0-rc.8

Description A remote attack can cause a sandbox issue within the Code Mode Sandbox component by manipulating the run code() function. The vendor has noted that the worker is intended for containment and is not designed to be a security boundary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the run code() function within the Code Mode Sandbox component.